← Database

CVE-2022-50896

MEDIUM CVSS: 6.1 Published: 2026-01-13 Modified: 2026-06-17

Description

Testa 3.5.1 contains a reflected cross-site scripting vulnerability in the login.php redirect parameter that allows attackers to inject malicious scripts. Attackers can craft a specially encoded payload in the redirect parameter to execute arbitrary JavaScript in victim's browser context.

Affected Platforms

Unknown

Weakness Type

CWE-79

References